CVE-2021-33194: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 7.5% chance of exploitation in the next 30 days.

golang.org/x/net before v0.0.0-20210520170846-37e1c6afe023 allows attackers to cause a denial of service (infinite loop) via crafted ParseFragment input.

Affected products

• Fedoraproject Fedora: version 36 only
• Golang Go: up to and including 1.15.12; from 1.16.0, up to and including 1.16.4

Published 2021-05-26. Last modified 2026-06-17.